Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/4YPEiWO6K5sYMaEQXSVb-TJkPK4.roa
File:                     4YPEiWO6K5sYMaEQXSVb-TJkPK4.roa (raw, json)
Hash identifier:          Hc1nnxP5/AFdOP74eW+po3nMV+0vBZWZ0VpK/0GobHE=
Subject key identifier:   E1:83:C4:89:63:BA:2B:9B:18:31:A1:10:5D:25:5B:F9:32:64:3C:AE
Certificate issuer:       /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial:       37
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/4YPEiWO6K5sYMaEQXSVb-TJkPK4.roa
Signing time:             Thu 13 Apr 2023 09:52:51 +0000
ROA not before:           Thu 13 Apr 2023 09:52:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     58785
IP address blocks:        157.118.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
        Validity
            Not Before: Apr 13 09:52:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E183C48963BA2B9B1831A1105D255BF932643CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:1c:97:23:b1:9c:bd:a5:b1:c7:3d:b9:18:
                    6e:4c:c6:ce:f5:7e:b3:9a:f0:9b:1e:2e:fd:53:26:
                    04:21:4b:b3:e2:2c:7d:27:b9:e8:0e:20:ad:d1:f8:
                    8d:a9:6a:12:a1:6e:6a:cd:f2:48:d9:3a:f9:d1:16:
                    7d:de:18:23:74:be:99:4f:dd:76:7a:57:b0:12:b4:
                    09:98:cd:03:4c:e1:2a:f3:a6:5c:ba:8f:c4:3f:93:
                    ba:54:dc:53:be:5c:c2:fc:4a:f8:04:19:10:70:ab:
                    c9:6d:58:e9:61:8f:01:0a:10:83:04:2e:43:53:7e:
                    90:74:c2:b0:72:ec:63:a2:b2:15:5d:0b:2e:10:5a:
                    d7:73:a6:84:ea:d5:30:4e:6f:a2:47:33:5e:ed:56:
                    45:d0:ad:e3:7f:17:4b:96:5d:2e:a3:12:f4:e9:01:
                    a1:a7:6a:3b:cf:7c:b3:7a:2c:35:73:ee:bd:c4:ec:
                    0a:8c:33:a1:00:9c:0e:16:e3:dd:ae:8d:b6:33:7e:
                    49:d5:81:04:a6:92:c9:22:25:2d:33:dc:29:25:1a:
                    35:e3:12:94:13:8d:72:3d:bf:4b:f1:96:93:2d:17:
                    1e:6a:11:ab:55:73:3f:a1:a9:dc:54:de:e9:27:6a:
                    d2:64:79:21:e1:84:fd:e7:33:b6:af:7c:a0:b7:cf:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:C4:89:63:BA:2B:9B:18:31:A1:10:5D:25:5B:F9:32:64:3C:AE
            X509v3 Authority Key Identifier:
                keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/4YPEiWO6K5sYMaEQXSVb-TJkPK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:86:dd:1d:27:ab:b0:d3:62:2a:77:46:43:4f:e5:67:18:
         e2:08:58:a5:be:50:46:b4:61:be:6a:f9:0c:33:04:34:67:12:
         dc:fe:5d:62:2f:53:fb:a7:bb:27:40:50:14:c5:e7:9a:d8:9b:
         a9:da:52:ed:ae:79:b3:db:ed:3c:36:14:4e:d6:7d:bb:60:d9:
         a6:37:c5:72:7a:d0:63:fc:d8:5e:40:fb:ad:56:32:ae:ce:ab:
         3d:55:c5:28:59:0d:e2:4f:52:53:de:02:55:8c:21:f2:b8:de:
         eb:fa:6d:be:dc:3f:f4:20:da:c0:e3:ae:4c:d0:76:cd:65:f0:
         80:44:07:6a:5e:6f:59:c1:e0:32:88:5f:9f:ed:fa:cd:00:56:
         be:d4:af:8a:50:b3:37:c4:9b:56:a9:1f:a6:9d:6c:9b:f3:27:
         54:86:a1:c9:ce:a6:28:2d:8e:19:b8:2c:89:13:b3:22:ce:c7:
         80:df:48:63:4d:cf:c1:3a:0c:d4:27:87:0e:19:b8:b6:22:eb:
         0a:55:60:11:66:c3:a1:40:18:e7:2e:e9:ad:48:23:ec:b6:40:
         55:fd:43:51:ee:4c:d8:af:5d:40:0e:b7:f9:47:6d:33:1c:60:
         8d:bd:5e:13:25:f8:9b:d4:a7:95:d6:11:50:49:bc:0d:68:80:
         3b:5e:c4:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMDE3
OENGRTg5MzRDQkRDNEZGNURCNkEzREVEREI0MUI3QzFGNEY3MB4XDTIzMDQxMzA5
NTI1MVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRTE4M0M0ODk2M0JBMkI5
QjE4MzFBMTEwNUQyNTVCRjkzMjY0M0NBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCkHJcjsZy9pbHHPbkYbkzGzvV+s5rwmx4u/VMmBCFLs+IsfSe5
6A4grdH4jalqEqFuas3ySNk6+dEWfd4YI3S+mU/ddnpXsBK0CZjNA0zhKvOmXLqP
xD+TulTcU75cwvxK+AQZEHCryW1Y6WGPAQoQgwQuQ1N+kHTCsHLsY6KyFV0LLhBa
13OmhOrVME5vokczXu1WRdCt438XS5ZdLqMS9OkBoadqO898s3osNXPuvcTsCowz
oQCcDhbj3a6NtjN+SdWBBKaSySIlLTPcKSUaNeMSlBONcj2/S/GWky0XHmoRq1Vz
P6Gp3FTe6Sdq0mR5IeGE/ecztq98oLfPbfECAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBThg8SJY7ormxgxoRBdJVv5MmQ8rjAfBgNVHSMEGDAWgBQgF4z+iTTL3E/122o9
7dtBt8H09zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTM5OC9JQmVNX29rMHk5eFA5ZHRxUGUzYlFiZkI5UGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9JQmVNX29rMHk5eFA5ZHRxUGUzYlFi
ZkI5UGMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTM5OC80WVBFaVdPNks1c1lNYUVRWFNWYi1USmtQSzQucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAnXYwDQYJKoZIhvcNAQELBQADggEBAHplht0dJ6uw02Iqd0ZDT+VnGOII
WKW+UEa0Yb5q+QwzBDRnEtz+XWIvU/unuydAUBTF55rYm6naUu2uebPb7Tw2FE7W
fbtg2aY3xXJ60GP82F5A+61WMq7Oqz1VxShZDeJPUlPeAlWMIfK43uv6bb7cP/Qg
2sDjrkzQds1l8IBEB2peb1nB4DKIX5/t+s0AVr7Ur4pQszfEm1apH6adbJvzJ1SG
ocnOpigtjhm4LIkTsyLOx4DfSGNNz8E6DNQnhw4ZuLYi6wpVYBFmw6FAGOcu6a1I
I+y2QFX9Q1HuTNivXUAOt/lHbTMcYI29XhMl+JvUp5XWEVBJvA1ogDtexIA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org